Try now

Program info

Estimated safety rating


msmpeng.exe is a program which is most likely NOT a virus or malware. So, if msmpeng.exe is on your computer, it is most likely ok, and will NOT be a cause for concern. Even if your PC is clean, it is still recommended to purchase a well-known antivirus with a good track record, in order to yourself your PC against viruses and malware.

Executable file path

 C:\Program Files\Windows Defender\MsMpEng.exe

Normally, this program is stored in C:\Program Files\Windows Defender\MsMpEng.exe.

MD5 hash of the executable file


The MD5 checksum for this executable is e5f051ad271423119200e5269d8c1c3c.

Is running as a service


This program is registered as a Windows service. This means it operates on your system in background, usually without displaying anything to you. Most Windows services are legit programs, which perform useful functions to other programs or to the Windows Operating System.

Belongs to the operating system


msmpeng.exe appears to have something to do with Windows SFC (System File Checker) or Windows File Protection.

Is a 64 bit executable file


64-bit code has been detected. This program can exploit the full power of a modern PC cpu.

File description

 Antimalware Service Executable

The description present in the program is Antimalware Service Executable.

File version

 4.11.15063.447 (WinBuild.160101.0800)

File version extracted from the file 4.11.15063.447 (WinBuild.160101.0800).


 Microsoft Corporation

Company Microsoft Corporation.


 © Microsoft Corporation. All rights reserved.

Legal copyright notice © Microsoft Corporation. All rights reserved..

Digitally signed


msmpeng.exe has a digital signature. Nowadays most legit programs are digitally signed.

Valid digital signature


The digital signature attached to msmpeng.exe checks out perfectly. This is most likely a clean, ok program.

Certifier name

 Microsoft Corporation

Digital certificate name: Microsoft Corporation

Issuer name

 Microsoft Code Signing PCA

Certificate's issuer name: Microsoft Code Signing PCA

Can be uninstalled


This executable does NOT have an uninstall routine set up in registry.